Privacy Policy

Afrizonemart (the “Platform,” “we,” “us”) is an online marketplace operated by Afrizonemart Limited. We connect African producers, suppliers, and brands with shoppers across Nigeria, the African continent, and the diaspora. This Privacy Policy explains how we collect, use, store, and share your personal data when you interact with our website at afrizonemart.com, our mobile applications (Android and iOS), and any related services.

For the purposes of the Nigeria Data Protection Act 2023 (NDPA) and the EU General Data Protection Regulation (GDPR), we are the “data controller” of the personal information you provide to us.

We collect personal data in three ways:

We use your personal data only for the purposes below:

• To process and deliver your orders — including sharing your shipping address with the courier that delivers your parcel.
• To run your account — sign-in, authentication, password reset, profile changes.
• To communicate with you — order confirmations, shipping updates, delivery notifications, account security alerts, and customer support replies.
• To send you marketing — only when you have opted in. You can opt out at any time from your account settings or by clicking the unsubscribe link in any marketing email.
• To improve the Platform — analysing usage patterns to fix bugs, improve product recommendations, and design new features. Where possible, we use aggregated or anonymised data for this purpose.
• To prevent fraud and abuse — rate limiting, account lockouts after repeated failed sign-ins, monitoring for suspicious activity.
• To comply with the law — tax, accounting, anti-money-laundering, and law-enforcement requests.

Under the NDPA and GDPR, we process your personal data on the following legal bases:

• Contract — to perform the contract of sale when you place an order.
• Consent — for marketing emails, SMS, push notifications, and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — fraud prevention, platform improvement, security monitoring, short-form usage analytics.
• Legal obligation — tax records, accounting, and required regulatory disclosures.

We do not sell your personal data. We share it only with:

• Payment processors — Squad, Paystack, and others as required to process a transaction.
• Couriers and logistics partners — shipping name, phone, and address needed to deliver your parcel.
• Infrastructure providers — Railway (api hosting), Vercel (web hosting), Cloudflare R2 (image storage), Cloudflare (CDN). These providers process data only on our behalf under data processing agreements.
• Communications providers — Resend (transactional email), Twilio (SMS / WhatsApp), Expo (push notifications).
• Analytics — where used, only with your consent for non-essential analytics.
• Law enforcement — when required by a valid legal request.
• Acquirers — if Afrizonemart is acquired or merged with another company, your data may transfer. We'll notify you before this happens.

Some of our service providers are located outside Nigeria (notably in the United States and the European Union). When your data is transferred across borders, we rely on standard contractual clauses or equivalent safeguards as required by the NDPA and GDPR.

• Active account data — for as long as your account exists.
• Order, payment, and tax records — at least 7 years after the order, to meet Nigerian accounting and tax requirements. Personally identifying fields (name, address, phone) on these records are anonymised if you delete your account.
• Marketing consent records — kept while your account exists; deleted on account deletion.
• Server logs — typically 90 days.

Subject to the NDPA, GDPR, and other applicable laws, you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete — through your profile settings or by contacting us.
• Delete your account — at any time, from inside the mobile app (Account → Profile → Danger Zone → Delete my account) or via afrizonemart.com/account/delete. See Section 9 for details on what is removed and what we keep.
• Restrict or object to certain types of processing — particularly direct marketing.
• Export your data in a portable format — contact us to request a copy.
• Withdraw consent for marketing or non-essential cookies at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng or, for EU residents, with your local data protection authority.

To exercise any of these rights, email us at privacy@afrizonemart.com. We'll respond within 30 days.

When you delete your account from inside the mobile app or via the web account-deletion page, the following happens immediately:

Removed entirely:

• Your name, email, phone number, profile picture.
• Your saved delivery addresses.
• Your wishlist and shopping cart.
• Your Continental Coins balance (reset to zero).
• Push notifications to your device(s).
• Marketing email and SMS subscriptions.

Kept for legal / accounting reasons but anonymised:

• Past orders — including amounts, items, dates. The shipping name, phone, and address on each record are replaced with placeholders.
• Past loyalty transactions — needed for refund clawback and audit. Account is zeroed.
• Published product reviews — the text remains so other shoppers continue to benefit. (A future update will let you anonymise these too.)

Afrizonemart is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

We use industry-standard measures to protect your data including HTTPS in transit, encryption at rest for sensitive fields, hashed passwords (bcrypt), rate limiting on authentication endpoints, and access controls on internal systems. No system is perfectly secure; we'll notify you and the relevant regulator if a breach affects you.

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date at the top. For material changes, we'll also notify you by email or an in-app notice.

Privacy questions or data subject requests: privacy@afrizonemart.com
General support: support@afrizonemart.com
Postal address: Afrizonemart Limited, Lagos, Nigeria.